HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIILowContained
Loretto Management Corporation
bd_9945c662ad807909 · schema v1 · pii pii-v1
Full breach record for Loretto Management Corporation →Loretto Management Corporation, a healthcare organization based in Syracuse, NY, experienced an external system breach (hacking) between May 1–2, 2024, during which data from its information systems was compromised. The breach was discovered on June 11, 2024, following a third-party forensic investigation. No PHI or evidence of fraudulent misuse was reported. A total of 18,952 individuals were affected, including 3 Maine residents. IDX credit monitoring (12 months) was offered.
Maine clockDiscovered Jun 11, 2024 → Filed with AG Jul 9, 202428d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5ead0c36f95172c4Indiana State AGfiled 2024-07-09Verified
- bd_f08d881e6c45d43bVermont State AGfiled 2024-07-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/43e77a98-c4cd-4c2a-9547-00f6b5e6e1a2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 9, 2024
- Raw hash
- 36080253f9603b52a61b715c500e935c043f1a3d8b7b911b09f1157d45d243bb
Reporting entity
- Name
- Loretto Management Corporationnorm: loretto management
- Industry
- Healthcare
Victim entity
- Name
- Loretto Management Corporationnorm: loretto management
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jun 11, 2024
- Materiality determined
- —
- Notification sent
- Jul 9, 2024
- Affected individuals
- 3
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 11, 2024→ Filed with AG: Jul 9, 202428d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.